Infisical

You can extend Infisical capabilities by running the Infisical Model Context Protocol (MCP) server. It lets your client applications interact with Infisical APIs through function calling, enabling you to create, read, update, and manage secrets, environments, projects, and collaborators from MCP-compatible clients.

How to use

You install and run the MCP server locally and connect your MCP client to it. The server exposes a set of tools that let you create, list, update, and delete secrets, projects, environments, folders, and invitations. Use your MCP client to call these tools in your workflows, scripts, or desktop integrations.

How to install

Prerequisites: ensure you have Node.js and npm installed on your machine.

Install and run the MCP server locally using npx.

# Install and run the Infisical MCP server via npx
npx -y @infisical/mcp

Configuration and usage notes

To authenticate and configure the MCP server, set the required environment variables before starting the server.

The following environment variables are used for authentication and host configuration:

• INFISICAL_UNIVERSAL_AUTH_CLIENT_ID — The Machine Identity universal auth client ID
• INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET — The Machine Identity universal auth client secret
• INFISICAL_HOST_URL — Optional custom host URL (defaults to https://app.infisical.com)

Using MCP with Claude Desktop

If you use Claude Desktop, configure your MCP server with a specific JSON configuration.

{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com", // Optional
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
      }
    }
  }
}

Available tools

create-secret

Create a new secret in a specified environment or folder.

delete-secret

Delete an existing secret by its name or path.

update-secret

Update the value or metadata of an existing secret.

list-secrets

List all secrets within a project or environment.

get-secret

Retrieve a single secret by its name or identifier.

create-project

Create a new project in your Infisical workspace.

create-environment

Create a new environment within a project.

create-folder

Create a new folder to organize secrets and environments.

invite-members-to-project

Invite one or more members to a project.